Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: Yb+A9ck2UY8OIE1ndUTvhZlji5SF+rEyMekIqlhkAbs=
Subject key identifier: D0:57:D9:EE:93:75:CE:FB:62:0C:B7:5F:7E:DE:74:C1:2E:D1:59:D0
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019DCD878A12DE403BFA1052E1CBC3F30E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 07C5
Signing time: Mon 27 Apr 2026 06:01:44 +0000
Manifest this update: Mon 27 Apr 2026 06:01:44 +0000
Manifest next update: Tue 28 Apr 2026 06:01:44 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: vK5I8TgMw7solE9M4LpE5Pj+zfVxmZ+Chf7uZrFDYGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:8a:12:de:40:3b:fa:10:52:e1:cb:c3:f3:0e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Apr 27 06:01:44 2026 GMT
Not After : Apr 28 06:01:44 2026 GMT
Subject: CN=d057d9ee9375cefb620cb75f7ede74c12ed159d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:d3:bf:83:c2:95:f1:e1:31:6d:19:b5:ec:
bf:b5:e1:a6:8a:1f:26:bc:da:95:d8:7d:85:4e:7e:
04:e4:a4:d8:b8:e5:21:e2:bc:ef:44:8c:c3:0d:86:
e2:87:cd:30:75:e6:2d:a9:8b:b7:e7:e1:71:cf:be:
54:30:43:37:4c:bf:93:81:33:e7:46:fa:ad:27:9c:
24:fc:43:dd:1b:eb:57:79:52:54:74:bf:52:3d:2c:
09:73:3f:d7:e2:2e:1d:e6:07:22:81:25:b5:ea:61:
50:2d:37:57:af:24:f8:96:db:ec:2e:66:e9:a2:f2:
bc:d8:f3:93:b3:19:95:a0:74:02:bb:30:60:41:7a:
10:d4:69:58:ac:56:83:5c:95:5e:f2:bd:18:ae:a7:
fe:b1:45:1e:c6:49:2a:19:f5:e9:ce:fb:ed:43:41:
83:d9:d0:47:7a:35:8b:65:a7:22:50:79:0c:2e:90:
d1:36:de:2e:12:b0:f2:a5:97:50:75:e3:a0:67:3a:
8c:27:cb:74:e6:7f:c4:a1:76:8c:dc:fc:e8:46:4b:
f7:75:20:17:bf:ef:ae:20:82:6c:e4:ab:42:9d:ff:
e1:e3:c4:b3:82:9b:d5:7a:48:a2:7e:bb:17:f6:f2:
33:dc:fc:d9:8b:4b:b5:48:2a:10:fc:af:a9:6a:e3:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:D9:EE:93:75:CE:FB:62:0C:B7:5F:7E:DE:74:C1:2E:D1:59:D0
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:98:be:56:68:8f:80:86:85:24:91:b2:fb:8e:56:68:a8:9a:
07:26:dd:c9:d4:1d:fd:5b:3e:e4:b5:cd:f1:0d:91:3a:80:d2:
f6:18:dd:1d:ae:15:73:97:e2:fc:d0:85:21:7e:2c:84:e3:5d:
f3:49:58:a0:26:fe:44:ad:5c:77:2a:78:4c:19:75:0d:04:b4:
61:59:b3:82:57:2e:dd:30:1f:55:0c:f2:2d:1f:78:9b:32:ce:
29:9a:ec:a5:b4:13:3c:7a:90:d0:97:ae:0e:24:08:39:bd:f2:
7e:e9:9d:6d:cd:36:5a:50:29:94:e7:a1:20:f2:24:c5:66:67:
40:86:87:09:61:f9:c1:3c:54:76:fd:cc:77:74:93:c8:06:cb:
98:be:ca:0c:f9:4f:a0:58:06:b6:6c:62:69:8d:12:ac:b8:79:
53:b3:c8:aa:2c:0d:a3:a7:e7:8b:b6:11:d4:e1:d5:31:27:38:
d4:48:50:05:f5:6d:06:98:a2:74:3a:6e:cc:2d:01:99:e6:2c:
fa:b7:4a:ba:c8:ab:cb:b2:f0:22:dd:50:a5:c2:bc:e5:18:11:
1e:ff:14:0f:35:6e:a1:72:22:41:12:be:76:eb:e2:5f:5b:42:
0a:41:4c:41:62:14:e4:63:03:da:e2:e8:40:77:25:93:b2:9f:
90:4a:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:55 2026 by rpki-client